Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

trac: cross-site scripting vulnerability

Package(s):

trac

CVE #(s):

CVE-2005-4305

Created:

January 26, 2006

Updated:

February 1, 2006

Description:

Trac, a web-based project management and bug tracking system, has a cross-site scripting attack vulnerability that may be exploited for the purpose of execution of arbitrary JavaScript code.

Alerts:

Gentoo

200601-12

2006-01-26

(Log in to post comments)

trac: cross-site scripting vulnerability

Posted Feb 2, 2006 14:09 UTC (Thu) by wingo (guest, #26929) [Link]

See my comments on http://lwn.net/Articles/168831/ -- this appears to have been fixed upstream for almost a month now. The created date is still misleading. The release went out with full disclosure a long time ago.